PRIVACY POLICY
Last updated: 22 September 2026
This Privacy Policy explains how BrewRitual collects, uses, shares and protects personal information when you visit brewritual.shop, place an order, contact us, create or use a customer account, or subscribe to marketing communications.
BrewRitual is based in the United Kingdom.
For customer enquiries:
info@brewritual.shop
For privacy, legal or account correspondence:
pavelsenkov@gmail.com
1. Information we collect
Depending on how you interact with BrewRitual, we may collect information including:
- your name;
- billing and delivery address;
- email address;
- telephone number;
- order and transaction information;
- products purchased or viewed;
- customer account information;
- communications you send to us;
- returns and customer-service information;
- marketing preferences;
- IP address;
- browser and device information; and
- cookie and website-usage information.
Payment information is processed through Shopify and applicable payment providers. BrewRitual does not normally receive or store your complete payment-card details.
2. How we use your information
We may use personal information to:
- process and fulfil orders;
- take or facilitate payment;
- arrange delivery;
- manage returns and refunds;
- provide customer service;
- communicate about your order;
- maintain customer accounts;
- prevent fraud and misuse;
- keep the website and checkout secure;
- comply with legal, tax and accounting requirements;
- manage disputes or legal claims;
- understand and improve the operation of the store; and
- send marketing communications where permitted.
3. Our lawful bases
Depending on the activity, we may rely on different lawful bases under UK data-protection law.
Contract
We use information where necessary to enter into or perform our contract with you, including:
- processing your order;
- taking payment;
- arranging delivery;
- managing returns and refunds; and
- providing order-related customer service.
Legal obligations
We may process and retain information where necessary to comply with legal obligations, including tax, accounting, consumer-protection and regulatory requirements.
Legitimate interests
Where appropriate, we may use information where necessary for legitimate business interests, including:
- protecting the store against fraud and misuse;
- maintaining website and account security;
- responding to and managing customer enquiries;
- improving store operations and customer experience; and
- establishing, exercising or defending legal claims.
Where we rely on legitimate interests, we consider the impact on your rights and privacy.
Consent
Where consent is required, we may rely on your consent for activities such as:
- email marketing subscriptions; and
- certain non-essential cookies or similar technologies.
You can withdraw consent at any time where processing is based on consent.
4. Shopify
Our online store is powered by Shopify.
Shopify provides services including website hosting, ecommerce functionality, checkout, customer accounts and security.
Shopify may process personal information in connection with providing these services.
Shopify may also use service providers and infrastructure located outside the United Kingdom.
5. Supplier-fulfilled orders
Some products sold through BrewRitual are dispatched directly by supplier partners.
Where a supplier needs to fulfil your order, we may provide information reasonably necessary for fulfilment, such as:
- your name;
- delivery address;
- telephone number or email where required for delivery;
- products ordered; and
- information necessary to manage the shipment.
Supplier partners should only receive information required to provide the relevant service.
6. Delivery providers
Your information may be shared with delivery or courier providers where necessary to deliver your order, provide tracking or resolve delivery issues.
The delivery provider used may vary depending on the product and fulfilment partner.
7. Payment providers
Payments are processed through Shopify and/or payment providers made available through checkout.
Payment providers may process information required to authorise and complete your payment, prevent fraud and comply with financial regulations.
Their own privacy terms may also apply to their processing.
8. Other service providers
We may share personal information where reasonably necessary with organisations that help us operate BrewRitual, including:
- Shopify;
- payment providers;
- supplier and fulfilment partners;
- delivery and courier companies;
- email and communication providers;
- website and technology providers;
- security and fraud-prevention providers;
- analytics providers where enabled and permitted;
- accountants, legal advisers and other professional advisers; and
- government, regulatory or law-enforcement bodies where legally required.
We only share information where there is an appropriate reason and lawful basis to do so.
9. Marketing emails
If you choose to subscribe to BrewRitual marketing, we may send you information about:
- new products;
- curated edits;
- BrewRitual Editions;
- ritual kits;
- new releases; and
- relevant offers or store news.
Where consent is required, we will only send this marketing after receiving the appropriate consent.
You can unsubscribe at any time using the unsubscribe link included in a marketing email.
You can also contact:
info@brewritual.shop
Withdrawing from marketing will not stop necessary transactional messages relating to an order or customer-service request.
10. Cookies and similar technologies
BrewRitual and Shopify use cookies and similar technologies in connection with the operation of the website.
Some cookies are necessary for functions such as:
- shopping baskets;
- checkout;
- security;
- authentication; and
- remembering necessary website settings.
Other technologies may be used for analytics, measurement, personalisation or marketing where enabled.
Where UK law requires consent before using a non-essential cookie or similar technology, the relevant technology should not be activated until the required consent has been obtained.
You may also be able to manage cookies through your browser and available website privacy controls.
11. International transfers
Shopify and some of the service providers involved in operating BrewRitual may process personal information outside the United Kingdom.
Where UK data-protection law requires safeguards for an international transfer, the appropriate legal safeguards should be used by the organisation responsible for that transfer.
12. How long we retain information
We retain personal information only for as long as reasonably necessary for the purpose for which it was collected.
Different information may therefore be retained for different periods.
For example, order and transaction information may need to be retained for longer periods to meet tax, accounting, consumer-protection, fraud-prevention or legal obligations.
Marketing information may be retained until you unsubscribe or until it is no longer reasonably required.
Customer-service records may be retained where necessary to manage an enquiry, order, dispute or legal obligation.
We periodically review information and delete or anonymise it when it is no longer reasonably required.
13. Your data-protection rights
Depending on the circumstances, UK data-protection law may give you rights including:
- the right to request access to your personal information;
- the right to request correction of inaccurate or incomplete information;
- the right to request deletion of information in certain circumstances;
- the right to request restriction of certain processing;
- the right to object to certain processing;
- the right to data portability in certain circumstances;
- the right to withdraw consent where processing relies on consent; and
- rights relating to certain automated decision-making where applicable.
These rights are subject to applicable legal conditions and exemptions.
To make a privacy request, contact:
pavelsenkov@gmail.com
You may also contact:
info@brewritual.shop
We may need to request information to confirm your identity before responding to certain requests.
14. Direct marketing objections
You have the right to object to the use of your personal information for direct marketing.
You can stop BrewRitual marketing emails at any time by using the unsubscribe link in the email or contacting us.
15. Security
We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.
However, no internet transmission or electronic storage system can be guaranteed to be completely secure.
16. Children
BrewRitual is intended as a general online retail store and is not designed to knowingly collect personal information from children who cannot lawfully provide the relevant information or consent.
If you believe personal information relating to a child has been provided improperly, please contact us.
17. Complaints
If you have concerns about how BrewRitual uses your personal information, please contact us so that we can investigate.
Privacy/legal contact:
pavelsenkov@gmail.com
You may also have the right to make a complaint to the Information Commissioner's Office (ICO), the UK data-protection regulator.
18. Changes to this Privacy Policy
We may update this Privacy Policy where our services, suppliers, technology, legal obligations or data-processing practices change.
The latest version will be published on brewritual.shop with an updated revision date.
19. Contact
For customer and order enquiries:
info@brewritual.shop
For privacy, legal or account correspondence:
pavelsenkov@gmail.com
Website:
brewritual.shop